Skip to contentDebian vulnerabilities
Newest
- x.org x server, debian linux, fedoraproject fedora +6 more +8 moreXorg-x11-server: use-after-free bug in destroywindowCVE-2023-5380Fix available4.7 Medium
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +25 more +27 moreXorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputpropertyCVE-2023-5367Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAddress bar spoofing via bidirectional charactersCVE-2023-5732Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...CVE-2023-5730Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring garbage collection extra operations were performed on a object that should not be. This...CVE-2023-5728Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...CVE-2023-5725Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDrivers are not always robust to extremely large draw calls and in some cases this scenario could...CVE-2023-5724Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible for certain browser prompts and dialogs to be activated or dismissed...CVE-2023-5721Fix available4.3 Medium
- openssl, debian linux, netapp h300s firmware +9 more +11 moreIncorrect cipher key & IV length processingCVE-2023-5363Fix available7.5 High
- buc traceroute, debian linux +1 moreIn buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse...CVE-2023-46316Fix available5.5 Medium
- apache http server, debian linux, fedoraproject fedora +2 moreApache HTTP Server: mod_macro buffer over-readCVE-2023-31122Fix available7.5 High
- apache http server, debian linux, fedoraproject fedora +2 moreApache HTTP Server: HTTP/2 stream memory not reclaimed right away on RSTCVE-2023-45802Public exploitFix available5.9 Medium
- redis, debian linux, fedoraproject fedora +2 moreRedis Unix-domain socket may have be exposed with the wrong permissions for a short time window.CVE-2023-45145Fix available3.6 Low
- debian linux, fedoraproject fedora, roundcube roundcubemail +1 more +3 moreStored XSS vulnerability in RoundcubeCVE-2023-5631In KEVFix availableEPSS 76.3%6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...CVE-2023-5388Fix available6.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreAn issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the...CVE-2023-45871Fix available7.5 High
- babel, babeljs babel-plugin-polyfill-corejs2, babel-plugin-polyfill-corejs3 +6 more +8 moreBabel vulnerable to arbitrary code execution when compiling specifically crafted malicious codeCVE-2023-45133Fix available9.4 Critical
- google chrome, debian linux +1 moreInappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote...CVE-2023-5486Fix available4.3 Medium
- google chrome, debian linux +1 moreUse after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had...CVE-2023-5473Fix available6.3 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote...CVE-2023-5485Fix available4.3 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an...CVE-2023-5479Fix available6.5 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote...CVE-2023-5478Fix available4.3 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local...CVE-2023-5477Fix available4.3 Medium
- google chrome, debian linux +1 moreHeap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who...CVE-2023-5474Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a...CVE-2023-5484Fix available6.5 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote...CVE-2023-5483Fix available6.5 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Downloads in Google Chrome prior to 118.0.5993.70 allowed a...CVE-2023-5481Fix available6.5 Medium
- google chrome, debian linux +1 moreUse after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker...CVE-2023-5476Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an...CVE-2023-5475Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote...CVE-2023-5218Fix available8.8 High
- apache zookeeper, debian linux +1 moreApache ZooKeeper: Authorization bypass in SASL Quorum Peer AuthenticationCVE-2023-44981Fix available9.1 Critical
- netty, debian linux +1 moreNetty HttpPostRequestDecoder can OOMCVE-2024-29025Fix available5.3 Medium
- eclipse jetty, debian linux, eclipse jetty.project +1 more +3 moreHTTP/2 HPACK integer overflow and buffer allocationCVE-2023-36478Fix available7.5 High
- apache tomcat, debian linux +1 moreApache Tomcat: Trailer header parsing too lenientCVE-2023-45648Fix available5.3 Medium
- apache tomcat, accumulo, debian linux +2 moreApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requestsCVE-2023-42795Fix available5.3 Medium
- lipnitsk libcue, debian linux, fedoraproject fedora +2 morelibcue vulnerable to out-of-bounds array accessCVE-2023-43641Fix availableEPSS 17.1%8.8 High
- mediawiki, debian linux +1 moreAn issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1...CVE-2023-45364Fix available5.3 Medium
- mediawiki, debian linux +1 moreMediaWiki Denial of Service vulnerabilityCVE-2023-45363Fix availableEPSS 23.8%7.5 High
- debian linux, linux kernel, red hat enterprise linux 6 +8 more +10 moreKernel: rsvp: out-of-bounds read in rsvp_classify()CVE-2023-42755Fix available6.5 Medium
- python pillow, debian linux +1 moreArbitrary Code Execution in PillowCVE-2023-50447Fix available8.1 High
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- python urllib3, debian linux, fedoraproject fedora +2 more`Cookie` HTTP header isn't stripped on cross-origin redirectsCVE-2023-43804Public exploitFix available5.9 Medium
- webmproject libvpx, debian linux, fedoraproject fedora +1 more +3 moreVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.CVE-2023-44488Fix available7.5 High
- composer, debian linux, fedoraproject fedora +2 moreRemote Code Execution via web-accessible composer.pharCVE-2023-43655Fix available6.4 Medium
- google chrome, libvpx, apple ipados +9 more +11 moreElectron affected by libvpx's heap buffer overflow in vp8 encodingCVE-2023-5217In KEVPublic exploitFix availableEPSS 49.0%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who...CVE-2023-5187Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker...CVE-2023-5186Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swapCVE-2023-42756Fix available4.4 Medium
- webkit, webkitgtk, debian linux +1 more +3 moreA use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A...CVE-2023-39928Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...CVE-2023-5176Fix available9.8 Critical
- Show moreLoading…